Principal Counsel, Regulatory & Privacy

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead the strategy for FTC compliance, which includes substantiating health and wellness claims, reviewing advertising, ensuring influencer disclosures, and managing risks related to unfair or deceptive practices.

• Oversee compliance for subscription and auto-renewal practices across all markets.

• Collaborate with marketing and product teams on advertising language, promotional strategies, and health-related claims.

• Manage compliance operations across global markets.

• Maintain a regulatory map that includes product registration, import/customs compliance, consumer protection, distance selling regulations, and mandatory disclosures.

• Provide guidance on hardware certification and labeling requirements.

• Monitor regulatory risks related to medical devices and support scoping for healthcare regulations, including FDA device classification, corporate medical practices, anti-kickback laws, and HIPAA compliance.

• Advise on compliance related to import/export regulations and sanctions.

• Develop and manage a legal checklist for new market entries.

• Create and oversee Eight Sleep's global privacy compliance program.

• Maintain privacy disclosures, consent frameworks, records of processing activities, and workflows for data subject requests.

• Take charge of drafting, negotiating, and executing Data Processing Agreements (DPAs).

• Lead compliance efforts for cross-border data transfers and localization requirements.

• Develop and manage the breach response playbook and lead incident response initiatives.

• Formulate compliance strategies for biometric and health-related data.

• Conduct Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) for new features, data pipelines, integrations, and models.

• Provide advice on data architecture, purpose limitation, and mechanisms for cross-border data transfers.

• Create governance policies for AI/ML data usage.

• Offer guidance on rights regarding training data usage, governance of model outputs, and obligations for algorithmic transparency.

• Monitor and evaluate new regulations concerning AI.

• Act as embedded regulatory and privacy counsel for Product and Engineering teams.

• Review data architecture decisions, third-party integrations, and telemetry data collection.

• Develop and conduct training on privacy and regulatory matters.

• Support commercial contracts, corporate governance, and litigation efforts.

• Collaborate with the Head of IP on departmental development, legal operations, and cross-functional legal strategies.

• Provide product-related legal counsel for new and highly regulated business areas.

⛳️ Requirements

• Juris Doctor (JD) with an active bar membership in at least one US state.

• 10–12 years of relevant experience, with a strong preference for a combination of law firm and in-house experience.

• Demonstrated ability to independently manage a regulatory or privacy function.

• Extensive knowledge of CCPA/CPRA and GDPR regulations.

• Practical experience with FTC regulations concerning health and wellness claims, consumer protection, and subscription/auto-renewal compliance.

• Experience in drafting and negotiating Data Processing Agreements at scale.

• Proven track record in building or significantly owning a privacy or compliance program from inception or early development stages.

• Demonstrated expertise across multiple in-house legal domains, beyond just privacy and regulatory matters.

• History of directly advising product and engineering teams.

• Strong independent judgment; comfortable making decisions and advising executives on routine matters without needing escalation.

🏝️ Benefits

• Equity participation for every full-time employee.

• Periodic equity refresh opportunities based on performance.

• Your own Pod.

• Comprehensive health, vision, and dental insurance for you and your dependents.

• Supplemental life insurance coverage.

• Flexible Paid Time Off (PTO).

• Commuter benefits.

• Paid parental leave.

• Immediate responsibilities and opportunities for accelerated career growth.

• Collaboration with exceptional talent.